Get workspace security insights
View security risks across all projects in your workspace, including security errors in public apps, unresolved personal data, and external collaborators. This feature is available on Business plans or higher.
Workspace administrators who need an overview of security and data privacy risks across all their projects.
Do this, in order
- 1
Generate an API key with the workspaces:read permission from your Lovable account settings.
The security insights endpoint requires this specific access permission to read workspace data.
- 2
Make a GET request to /v1/workspaces/{workspace_id}/security-center/insights using your workspace ID.
This pulls project and member counts alongside prioritized security findings across the entire workspace.
- 3
Add the review_priority query parameter to filter by needs_review, review_recommended, or no_review_needed.
Filtering isolates the most urgent security findings so your team can triage high-risk apps first.
- 4
Review flagged projects, such as public apps with errors or orphaned projects whose owners left the workspace.
Addressing these issues prevents unauthorized external access and resolves active security vulnerabilities.
Paste this into your project
Create a dashboard component that connects to the Lovable API to fetch workspace security insights from GET /v1/workspaces/{workspace_id}/security-center/insights. Display the overall project and member summary counts at the top, and show a categorized list of security findings with priority badges (needs review, review recommended, no review needed). Allow filtering the findings list by review priority, and show empty states or clear warnings for issues like external collaborators or public apps with security errors.Words decoded
- Eventually consistent
- A data system where recent changes (like adding a member or updating a project) might take a few moments to appear in the results.
- Scope
- A specific permission attached to an API key that defines what actions it is allowed to perform.
Where people get stuck
- The review_priority query filter only narrows down the list of findings; the workspace total counts will always reflect the whole workspace.
- If your workspace does not have access to personal data detection features, finding types related to personal data are omitted entirely.
- Recent updates to projects or members may not appear immediately due to eventual consistency; allow a brief delay before re-checking.
- Requests will fail with a 402 payment required error if your workspace is below the Business plan tier.
The short version, steps, decoder and prompt on this page are written automatically from Lovable's own documentation and can lag or misread it. The official page is always the authority.